Head of Legal & Compliance

Lucidya
Riyadh
Workplace: OnsiteFull timeFunction: Legal, Risk & ComplianceExperience: 10+ yearsSkills: ["Autonomous execution","Commercial judgment","Governance rigor","Clear communication","High integrity"]

Build and lead a lean Legal & Compliance function that enables the business to scale confidently. Own legal strategy, commercial contracting, corporate governance, risk, and data protection as Data Protection Officer. Lead the GRC program to keep ISO 27001, SOC 2 Type II, NIST, GDPR, and related requirements audit-ready, and drive M&A, diligence, and regional expansion by coordinating counsel across jurisdictions. Partner with the executive team and external advisors.

Loading

Loading job details...

Preparing the role view and application actions.

FursaFursa
Lucidya
Lucidya
1 month ago

Head of Legal & Compliance

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI
Last checked: 23 hours agoStatus: Live

Job Summary

Build and lead a lean Legal & Compliance function that enables the business to scale confidently. Own legal strategy, commercial contracting, corporate governance, risk, and data protection as Data Protection Officer. Lead the GRC program to keep ISO 27001, SOC 2 Type II, NIST, GDPR, and related requirements audit-ready, and drive M&A, diligence, and regional expansion by coordinating counsel across jurisdictions. Partner with the executive team and external advisors.
Location: Riyadh
Workplace: Onsite
Employment Type: Full time
Job Function: Legal, Risk & Compliance
Seniority: Sr. Director level

Key Responsibilities

  • •Own the legal and compliance strategy, enabling growth while maintaining governance and managing risk.
  • •Streamline commercial contracting across customer, vendor, partner, and public-sector agreements using templates, playbooks, and processes.
  • •Lead the Governance, Risk & Compliance (GRC) program to keep certifications and compliance requirements audit-ready through partnership with Security and Engineering.
  • •Act as Data Protection Officer, ensuring compliance with Saudi PDPL and GDPR while embedding privacy-by-design into products and operations.
  • •Lead corporate legal matters including board governance, corporate administration, mergers and acquisitions, due diligence, and support for capital markets readiness.

Key Requirements

  • •10+ years of legal experience, including in-house compliance leadership in a technology, SaaS, or similarly regulated company.
  • •Qualified lawyer with strong grounding in commercial, corporate, and technology law; Saudi law exposure and KSA/GCC regulatory environment understanding strongly preferred.
  • •Ownership of compliance and certification programs such as ISO 27001 and SOC 2, plus data-protection compliance (Saudi PDPL and/or GDPR).
  • •Hands-on M&A and corporate experience, including diligence and transaction processes, ideally with investors and boards.
  • •Experience operating in regulated industries such as public-sector, banking/financial services, or telecom, including managing external counsel effectively.
Experience:10+ yearsSaaSTechnologyRegulated industryPublic sectorFinancial servicesTelecom
Skills:Autonomous executionCommercial judgmentGovernance rigorClear communicationHigh integrity
Certifications:ISO 27001SOC 2 Type II
Languages:EnglishArabic
Tech Stack:ISO 27001SOC 2 Type IINISTGDPRSaudi PDPLGRCEnterprise risk registerPrivacy-by-design

Company Brief

Lucidya
Provides an Arabic-first customer experience and social listening platform that helps brands monitor conversations, analyze sentiment, and manage customer interactions across digital channels using AI-driven insights.
Industry: SaaS
Company Size: Medium (51 to 250 employees)
Growth: Growth Stage Startup
Headquarters: Riyadh, Saudi Arabia
Founded: 2016
WebsiteLinkedIn